OneLab Secured Deployment Solution
Innovate without the IT barriers
Reimagine lab automation with OneLab Secured Deployment Solution: a future-ready platform delivering secure, seamless IT integration and compliance, enabling scientists to innovate without IT barriers.
OneLab Software’s intuitive interface and vast online library give scientists the tools to design and automate protocols with ease. For organizations that need to meet strict security and regulatory compliance standards, OneLab Secured Deployment Solution (SDS) delivers a turnkey, Windows™ Operating System-based platform that integrates seamlessly with your organization’s network.
OneLab Software delivers uncompromising cybersecurity, 21 CFR Part 11 and GxP readiness, and enterprise-wide performance, all with simplified deployment and maintenance through OneLab SDS. With OneLab SDS, your lab can boost productivity and focus on science, not system upkeep.
OneLab Secured Deployment Solution
Overview
- Enable plug‑and‑play installation with seamless integration into your existing network and LIMS.
- Support enterprise‑wide cybersecurity with robust protection against cyber threats.
- Automate protocol design and data acquisition using OneLab Software’s intuitive interface and workflows.
- Maintain 21 CFR Part 11-, GxP-, and EU Annex 11-readiness with built‑in audit trails, electronic signatures, and validation.
- Support scalable, future‑ready interoperability across waters_connect Platform, Empower Software, and MassLynx Software workflows.
Recommended Use: Achieve enterprise-wide cybersecurity with secure, seamless IT integration and compliance-readiness.
Enterprise-wide performance without IT headaches
In the pharmaceutical or biotechnology fields, compliance isn't optional—it's critical. From FDA 21 CFR Part 11 and GxP to EU Annex 11, every step demands precision, security, and trust. That's why OneLab SDS is a game-changer for your lab. Achieve enterprise-wide compliance-readiness with built-in audit trails, electronic signatures, and validation, while safeguarding sensitive data and IP with robust cybersecurity, and role-based access.
Unlike traditional IT systems that require heavy resources and complex setups, OneLab Software offers a plug-and-play installation that integrates seamlessly with your existing network and LIMS. The result? Scientists spend less time wrestling with systems and more time driving innovation. With OneLab Software, compliance and connectivity become effortless, so you can focus on science, not IT.
Cybersecurity without complexity
In pharma and biotechnology, cybersecurity is no longer optional—it's a mandatory requirement in today's regulatory landscape. Cyber threats can disrupt studies, undermine quality, and put valuable research at risk, which is why strong protection has become essential.
OneLab SDS addresses this by creating a controlled, isolated environment where lab instruments and OneLab Enterprise operate together, segmented from your corporate network so that instrument communications cannot reach enterprise resources.
The resulting architecture aligns with the EU Cyber Resilience Act and the principles of 21 CFR Part 11. Delivered as a pre-configured, validated solution, OneLab SDS deploys in minutes with minimal IT involvement, ensuring consistent and supportable lifecycle management.
Scalable, future-ready deployment for modern labs
The scientific challenges your lab takes on are evolving quickly, and the infrastructure beneath them should keep pace just as easily. OneLab SDS grows with your operations, weaving secure, scalable workflows into every corner of your lab ecosystem. Accelerating mAb analysis in waters_connect, running small-molecule QA/QC in Empower, reviewing MS/MS data from siRNA experiments in MassLynx—whatever the workflow, OneLab SDS keeps everything genuinely interoperable. Data acquisition flows directly from OneLab Software, the repetitive manual steps fall away, and scientists are free to focus on insight and innovation rather than routine.
That same fluidity extends to your broader enterprise IT environment. Network volumes can be configured for external backups aligned with your data retention and disaster-recovery policies. LDAP integration can tie OneLab SDS to your enterprise directory server for centralized authentication and streamlined user management. The OneLab API provides a direct, bidirectional channel between your LIMS and your experiments records. The outcome is straightforward: less complexity, more productivity, and a lab built to stay ahead of whatever comes next—secure, efficient, and ready for the future.
Frequently Asked Questions
What are the key benefits of OneLab SDS?
Rapid Deployment — Pre-configured and validated turnkey workstation delivers a ready-to-use OneLab Enterprise environment in minutes rather than days, with minimal or no involvement from customer IT departments.
Network Isolation — Controlled boundary between instruments and the corporate network: up to six dedicated Ethernet ports on an isolated local network, separated from a single corporate uplink. Capacity scales beyond six devices by adding an additional Ethernet switch downstream — preserving isolation as your lab grows.
Cybersecurity by Design — Windows 11 Enterprise LTSC foundation aligned with EU Cyber Resilience Act requirements ensures instrument-level communication cannot be used to access enterprise network resources.
IT-Friendly Control — Customers retain full administrative control of the host operating system to apply internal security policies, configurations, update strategies, and backup options.
Guided Software Lifecycle Management — Software installation, updates, and recovery are fully managed through a guided installer workflow requiring no advanced technical expertise.
Which lab scenarios are ideal for OneLab SDS?
Regulated pharmaceutical and GxP environments — Labs needing a validated, GxP-compliant OneLab Enterprise deployment aligned with 21 CFR Part 11 electronic records and signatures requirements.
Cybersecurity-sensitive organizations — Sites where corporate IT mandates strict separation between laboratory instruments and enterprise network resources to meet cyber resilience obligations.
IT-constrained or distributed labs — Facilities lacking dedicated IT support for instrument deployment, or global organizations needing consistent, repeatable deployment across multiple sites.
Multi-instrument workflows — Labs running OneLab Software alongside Empower, MassLynx, or waters_connect, where unified, traceable orchestration across connected devices is required.
What are the traceability, compliance, and integration benefits?
Compliance and Security
Pre-installed Windows 11 Enterprise LTSC for long-term, predictable support and patching.
Architecture aligned with EU Cyber Resilience Act and 21 CFR Part 11 principles for electronic records and signatures.
Logical isolation of instrument traffic from the corporate network — instrument communications cannot traverse to enterprise resources.
Validated hardware/software pairing ensures consistent, supportable, and audit-ready behavior across deployments.
Software Integration
OneLab + Empower — Links sample prep workflows to chromatography execution with GxP-compliant audit trails.
OneLab + MassLynx — Exports sample lists and triggers LC–MS runs from prep workflows on connected devices.
OneLab + waters_connect — Closes the loop from sample preparation to analytical result in a single traceable workflow.
These integrations ensure laboratory automation steps are seamlessly linked to downstream analytical execution within a secured, isolated execution environment.
for use as a digital lab console.
What applications are ideal for OneLab SDS?
OneLab SDS supports any regulated or cybersecurity-sensitive workflow where OneLab Enterprise needs to orchestrate connected devices behind a controlled network boundary:
Pharmaceutical QC and release testing — Validated automation with full audit trails for regulated release workflows.
Bioanalytical sample prep — Documented, reproducible execution of pipetting, mixing, and thermal steps across Andrew+, Pipette+, Shaker+, Peltier+, and Heater-Shaker+.
Method transfer across sites — Same protocols, same validated platform deployed consistently across multiple global laboratories.
GxP-regulated R&D and process development — Electronic records and signatures captured in a compliant environment aligned with 21 CFR Part 11.
CRO and CDMO operations — Rapid, repeatable deployment of secured OneLab Enterprise environments for client-specific projects.
Also applicable across genomics, proteomics, drug discovery, and any regulated laboratory environment requiring isolation between instruments and corporate IT infrastructure.
Can I use OneLab SDS without involving my corporate IT team?
Yes. OneLab SDS is delivered as a pre-activated Windows installation. The guided installer workflow handles software installation, updates, and recovery without advanced technical expertise, allowing laboratories to deploy a GxP-compliant OneLab Enterprise environment with minimal or no IT involvement. Customers still retain full administrative control of the host operating system whenever they want to apply internal security policies or update strategies.
How does OneLab SDS connect to my network and instruments?
OneLab SDS uses a dual-network architecture: one Ethernet port connects to the corporate network for OneLab Enterprise access, while up to six dedicated Ethernet ports form an isolated local instrument network for connected devices such as Andrew+, Pipette+, Shaker+, Peltier+, and Heater-Shaker+. Each connected instrument occupies one port, and the local instrument network can be expanded with an additional Ethernet switch. This logical separation ensures instrument traffic remains segregated from enterprise resources in accordance with cybersecurity and data integrity requirements.
What bundle and licensing options are available?
OneLab SDS ships as an all-in-one bundle that includes a pre-configured Windows 11 LTSC workstation, keyboard, mouse, DisplayPort–HDMI adapter, OneLab SDS Installer, and a 10-user OneLab Enterprise license. Bundles are available with 1-year (P/N 176006219), 3-year (P/N 176006220), or 5-year (P/N 176006221) terms. Additional 10-user OneLab Enterprise licenses for expansion or renewal are available in matching 1-, 3-, and 5-year options (P/N 667007906DD, 667007907DD, 667007908DD), and an optional Lenovo 24" ThinkVision monitor (P/N 668000273) is available for use as a digital lab console.
